CEHRS HIPAA and Patient Confidentiality 3

Question 1

An EHR specialist accidentally emails a patient's lab results to the wrong patient. Under HIPAA's Breach Notification Rule, this is most likely classified as:

Accepted Answer

A breach requiring notification unless a low probability of compromise is demonstrated

Answer

Unauthorized disclosures are presumed to be breaches unless the covered entity can demonstrate a low probability that PHI was compromised through a four-factor risk assessment.

Question 2

How long must covered entities retain HIPAA-related documentation, such as policies and procedures?

Accepted Answer

6 years from creation or last effective date

Answer

HIPAA requires covered entities to retain documentation for 6 years from the date of its creation or the date it was last in effect, whichever is later.

Question 3

Which type of PHI de-identification method requires a statistician to certify that the risk of re-identification is very small?

Accepted Answer

Expert Determination method

Answer

The Expert Determination method requires a qualified statistical expert to certify that the risk of identifying an individual is very small.

Question 4

A covered entity may share PHI with law enforcement WITHOUT patient authorization in which situation?

Accepted Answer

To report a crime that occurred on the premises

Answer

HIPAA permits disclosure to law enforcement to report a crime that occurred on the premises or to alert law enforcement to a crime committed against the covered entity's personnel.

Question 5

Under HIPAA, which of the following disclosures requires an OPPORTUNITY for the patient to agree or object?

Accepted Answer

Disclosure of PHI in a facility directory to callers who ask by name

Answer

Facilities must give patients the opportunity to object to or restrict inclusion of their information in the facility directory before the information is disclosed.

(CEHRS) Certified Electronic Health Records Specialist Practice Test

(CEHRS) Certified Electronic Health Records Specialist Practice Test

CEHRS HIPAA and Patient Confidentiality 3